harnessed 3.8.0 → 3.9.1

package/dist/cli.mjs

@@ -3,11 +3,12 @@ import { execSync, spawnSync, spawn } from 'child_process';
 import { existsSync, mkdirSync, renameSync, writeFileSync, readFileSync, readdirSync } from 'fs';
 import { join, dirname, resolve, relative } from 'path';
 import { homedir } from 'os';
+import { readFile, readdir, unlink, writeFile, stat, rm, cp, mkdir, access, rename } from 'fs/promises';
 import { Type } from '@sinclair/typebox';
 import { Value } from '@sinclair/typebox/value';
 import { LineCounter, parseDocument, parse, isSeq, isScalar } from 'yaml';
-import { readFile, readdir, unlink, writeFile, stat, rm, cp, mkdir, access, rename } from 'fs/promises';
 import lockfile from 'proper-lockfile';
+import * as p from '@clack/prompts';
 import { Command } from 'commander';
 import { Ajv } from 'ajv';
 import * as ajvFormatsNs from 'ajv-formats';
@@ -15,7 +16,6 @@ import { fileURLToPath } from 'url';
 import { createHash } from 'crypto';
 import { Parser } from 'expr-eval';
 import { query } from '@anthropic-ai/claude-agent-sdk';
-import * as p from '@clack/prompts';
 import { createPatch } from 'diff';
 import pc from 'picocolors';
 import { stdout, stdin } from 'process';
@@ -119,6 +119,89 @@ var init_harnessedRoot = __esm({
   "src/installers/lib/harnessedRoot.ts"() {
   }
 });
+function checkNodeVersion() {
+  const v = process.versions.node;
+  const major = Number.parseInt(v.split(".")[0] ?? "0", 10);
+  return major >= 22 ? { name: "node \u2265 22", status: "pass", message: `node ${v}` } : {
+    name: "node \u2265 22",
+    status: "fail",
+    message: `node ${v} (need \u2265 22)`,
+    fix: "nvm install 22 && nvm use 22"
+  };
+}
+async function checkMcpScope() {
+  const projectMcp = join(process.cwd(), ".mcp.json");
+  const userClaude = join(homedir(), ".claude.json");
+  let projectExists = false;
+  try {
+    await readFile(projectMcp, "utf8");
+    projectExists = true;
+  } catch {
+  }
+  let userHasMcp = false;
+  try {
+    const raw = await readFile(userClaude, "utf8");
+    const parsed = JSON.parse(raw);
+    userHasMcp = !!parsed.mcpServers && Object.keys(parsed.mcpServers).length > 0;
+  } catch {
+  }
+  if (userHasMcp) {
+    return {
+      name: "mcp scope = project",
+      status: "fail",
+      message: `~/.claude.json has user-scope mcpServers (CC #54803 risk)`,
+      fix: "remove user-scope entries; re-add via `claude mcp add --scope project ...`"
+    };
+  }
+  return {
+    name: "mcp scope = project",
+    status: "pass",
+    message: projectExists ? "project .mcp.json present" : "no MCP servers installed"
+  };
+}
+function checkJq() {
+  const finder = process.platform === "win32" ? "where" : "which";
+  const r = spawnSync(finder, ["jq"], { encoding: "utf8" });
+  if (r.status === 0 && r.stdout.trim().length > 0) {
+    return {
+      name: "jq present",
+      status: "pass",
+      message: r.stdout.split(/\r?\n/)[0]?.trim() ?? "jq found"
+    };
+  }
+  const fix = process.platform === "win32" ? "winget install jqlang.jq  (or: scoop install jq)" : process.platform === "darwin" ? "brew install jq" : "apt-get install jq  (or: dnf install jq)";
+  return { name: "jq present", status: "fail", message: "jq not found in PATH", fix };
+}
+function checkWinBash() {
+  if (process.platform !== "win32") {
+    return { name: "bash flavor (win)", status: "pass", message: "skipped (non-Windows)" };
+  }
+  const where = spawnSync("where", ["bash"], { encoding: "utf8" });
+  const firstBash = (where.stdout ?? "").split(/\r?\n/)[0]?.trim() ?? "(not found)";
+  if (where.status !== 0 || !firstBash || firstBash === "(not found)") {
+    return {
+      name: "bash flavor (win)",
+      status: "fail",
+      message: "no bash on PATH",
+      fix: "install Git for Windows (Git Bash) and ensure it is on PATH"
+    };
+  }
+  const probe = spawnSync("bash", ["-c", "echo $WSL_DISTRO_NAME"], { encoding: "utf8" });
+  const distro = (probe.stdout ?? "").trim();
+  if (distro.length > 0) {
+    return {
+      name: "bash flavor (win)",
+      status: "fail",
+      message: `WSL bash (${distro}) \u2014 ralph-loop subagent fork breaks under WSL`,
+      fix: "reorder PATH so Git Bash precedes WSL bash.exe (Settings \u2192 System \u2192 Environment Variables)"
+    };
+  }
+  return { name: "bash flavor (win)", status: "pass", message: `${firstBash} (Git Bash / native)` };
+}
+var init_check_builtin = __esm({
+  "src/cli/lib/check-builtin.ts"() {
+  }
+});
 
 // src/cli/lib/probe-gstack.ts
 var probe_gstack_exports = {};
@@ -604,21 +687,27 @@ async function checkPlanningWithFiles() {
       name: "planning-with-files plugin",
       status: "warn",
       message: "plugin directory exists but no version subdir found",
-      fix: REMEDIATION
+      fix: REMEDIATION,
+      install_commands: INSTALL_COMMANDS
     };
   } catch {
     return {
       name: "planning-with-files plugin",
       status: "warn",
       message: "not installed (plugin cache path missing)",
-      fix: REMEDIATION
+      fix: REMEDIATION,
+      install_commands: INSTALL_COMMANDS
     };
   }
 }
-var REMEDIATION;
+var REMEDIATION, INSTALL_COMMANDS;
 var init_check_planning_with_files = __esm({
   "src/cli/lib/check-planning-with-files.ts"() {
-    REMEDIATION = "install via Claude Code plugin marketplace: `claude plugin install planning-with-files` (requires >=2.2.0 per R20.15 + D-15)";
+    REMEDIATION = "install via `claude plugin marketplace add OthmanAdi/planning-with-files && claude plugin install planning-with-files` (requires >=2.2.0 per R20.15 + D-15)";
+    INSTALL_COMMANDS = [
+      "claude plugin marketplace add OthmanAdi/planning-with-files",
+      "claude plugin install planning-with-files"
+    ];
   }
 });
 
@@ -662,13 +751,15 @@ async function checkMattpocockSkills() {
     name: "mattpocock-skills",
     status: "warn",
     message: "not installed (plugin cache + user-skill paths both missing)",
-    fix: REMEDIATION2
+    fix: REMEDIATION2,
+    install_commands: INSTALL_COMMANDS2
   };
 }
-var REMEDIATION2;
+var REMEDIATION2, INSTALL_COMMANDS2;
 var init_check_mattpocock_skills = __esm({
   "src/cli/lib/check-mattpocock-skills.ts"() {
-    REMEDIATION2 = "install via Claude Code plugin marketplace: `claude plugin install mattpocock-skills` (or git clone https://github.com/mattpocock/skills ~/.claude/skills/mattpocock-skills); methodology fallback already inline in role-prompts.yaml per v3.6.0 Phase 1 \u2014 install is optional but enables /grill-with-docs /zoom-out etc. SlashCommand acceleration";
+    REMEDIATION2 = "install via `npx skills@latest add mattpocock/skills` (or git clone https://github.com/mattpocock/skills ~/.claude/skills/mattpocock-skills); methodology fallback already inline in role-prompts.yaml per v3.6.0 Phase 1 \u2014 install is optional but enables /grill-with-docs /zoom-out etc. SlashCommand acceleration";
+    INSTALL_COMMANDS2 = ["npx skills@latest add mattpocock/skills"];
   }
 });
 
@@ -699,25 +790,64 @@ async function checkMcpAvailability() {
       message: `all 3 installed: ${installed.join(", ")}`
     };
   }
+  const installCommands = missing.map((s) => SERVER_INSTALL_COMMANDS[s]);
   if (installed.length === 0) {
     return {
       name: "MCP servers (tavily/exa/chrome-devtools)",
       status: "warn",
       message: "none of 3 target MCP servers installed in ~/.claude/settings.json",
-      fix: "install via `claude mcp add <server-name>`; harnessed routes web-search to tavily/exa per workflows/judgments/web-search-routing.yaml \u2014 without them, falls back to WebFetch/WebSearch built-in (degraded but functional)"
+      fix: "install via per-server transport-specific command (see install_commands); harnessed routes web-search to tavily/exa per workflows/judgments/web-search-routing.yaml \u2014 without them, falls back to WebFetch/WebSearch built-in (degraded but functional)",
+      install_commands: installCommands
     };
   }
   return {
     name: "MCP servers (tavily/exa/chrome-devtools)",
     status: "warn",
     message: `${installed.length}/3 installed: ${installed.join(", ")}; missing: ${missing.join(", ")}`,
-    fix: `install missing via \`claude mcp add ${missing.join(" && claude mcp add ")}\``
+    fix: `install missing via per-server command (see install_commands): ${missing.join(", ")}`,
+    install_commands: installCommands
   };
 }
-var TARGET_SERVERS;
+var TARGET_SERVERS, SERVER_INSTALL_COMMANDS;
 var init_check_mcp_availability = __esm({
   "src/cli/lib/check-mcp-availability.ts"() {
     TARGET_SERVERS = ["tavily-mcp", "exa-mcp", "chrome-devtools"];
+    SERVER_INSTALL_COMMANDS = {
+      "tavily-mcp": "claude mcp add tavily-remote-mcp --transport http https://mcp.tavily.com/mcp/",
+      "exa-mcp": "claude mcp add --transport http exa https://mcp.exa.ai/mcp",
+      // chrome-devtools: empirical-pending — assumed npx until dogfood confirmation.
+      "chrome-devtools": "npx chrome-devtools-mcp@latest"
+    };
+  }
+});
+
+// src/cli/lib/doctor-registry.ts
+var CHECKS;
+var init_doctor_registry = __esm({
+  "src/cli/lib/doctor-registry.ts"() {
+    init_check_builtin();
+    CHECKS = [
+      async () => checkNodeVersion(),
+      checkMcpScope,
+      async () => checkJq(),
+      async () => checkWinBash(),
+      async () => {
+        const { checkOrigin: checkOrigin2 } = await Promise.resolve().then(() => (init_origin_check(), origin_check_exports));
+        const r = checkOrigin2(process.cwd(), { allowFork: true });
+        return { name: "origin URL", status: r.status, message: r.detail, fix: r.fix };
+      },
+      async () => {
+        const { probeGstackPrefix: probeGstackPrefix2 } = await Promise.resolve().then(() => (init_probe_gstack(), probe_gstack_exports));
+        const r = probeGstackPrefix2();
+        return { name: "gstack prefix", status: r.status, message: r.detail, fix: r.fix };
+      },
+      async () => (await Promise.resolve().then(() => (init_check_deprecations(), check_deprecations_exports))).checkDeprecations(),
+      async () => (await Promise.resolve().then(() => (init_check_token_budget(), check_token_budget_exports))).checkTokenBudget(),
+      async () => (await Promise.resolve().then(() => (init_check_agent_teams_doctor(), check_agent_teams_doctor_exports))).checkAgentTeamsDoctor(),
+      async () => (await Promise.resolve().then(() => (init_check_planning_with_files(), check_planning_with_files_exports))).checkPlanningWithFiles(),
+      async () => (await Promise.resolve().then(() => (init_check_mattpocock_skills(), check_mattpocock_skills_exports))).checkMattpocockSkills(),
+      async () => (await Promise.resolve().then(() => (init_check_mcp_availability(), check_mcp_availability_exports))).checkMcpAvailability()
+    ];
   }
 });
 function statePath() {
@@ -950,9 +1080,91 @@ var init_resume = __esm({
   }
 });
 
+// src/cli/lib/auto-install.ts
+var auto_install_exports = {};
+__export(auto_install_exports, {
+  runAutoInstall: () => runAutoInstall
+});
+async function runAutoInstall(opts) {
+  const out = { installed: [], skipped: [], failed: [] };
+  if (!opts.autoInstall) {
+    return out;
+  }
+  const results = await Promise.all(CHECKS.map((c) => c()));
+  const installables = results.filter(
+    (r) => r.status === "warn" && Array.isArray(r.install_commands) && r.install_commands.length > 0
+  );
+  if (installables.length === 0) {
+    return out;
+  }
+  console.log(
+    `
+\u{1F4A1} ${installables.length} optional check(s) installable \u2014 harnessed can run install commands now:`
+  );
+  for (const check of installables) {
+    const commands = check.install_commands;
+    if (opts.nonInteractive) {
+      out.skipped.push(check.name);
+      continue;
+    }
+    const preview = commands.map((c) => `    $ ${c}`).join("\n");
+    console.log(`
+  ${check.name}:`);
+    console.log(preview);
+    const ans = await p.confirm({
+      message: `Run ${commands.length} install command(s) for "${check.name}"?`,
+      initialValue: true
+    });
+    if (p.isCancel(ans) || ans !== true) {
+      out.skipped.push(check.name);
+      continue;
+    }
+    let chainOk = true;
+    for (const cmd of commands) {
+      const tokens = cmd.split(/\s+/).filter((t2) => t2.length > 0);
+      const exe = tokens[0];
+      const args = tokens.slice(1);
+      if (exe === void 0) {
+        out.failed.push({ name: check.name, reason: `empty command in install_commands` });
+        chainOk = false;
+        break;
+      }
+      const r = spawnSync(exe, args, {
+        encoding: "utf8",
+        stdio: "inherit",
+        // Windows needs shell for `.cmd` / `.bat` exes (npx.cmd / claude.cmd
+        // shims); Unix is fine either way. Pass-through to OS shell handles
+        // PATH resolution + extension lookup.
+        shell: true
+      });
+      if (r.status !== 0) {
+        const reason = r.error !== void 0 ? `spawn error: ${r.error.message}` : `exit code ${r.status ?? "<unknown>"} on \`${cmd}\``;
+        out.failed.push({ name: check.name, reason });
+        console.error(`  \u2717 failed ${check.name} \u2014 ${reason}`);
+        chainOk = false;
+        break;
+      }
+    }
+    if (chainOk) {
+      out.installed.push(check.name);
+      console.log(`  \u2713 installed ${check.name}`);
+    }
+  }
+  console.log(
+    `
+Auto-install summary: ${out.installed.length} installed / ${out.skipped.length} skipped / ${out.failed.length} failed`
+  );
+  return out;
+}
+var init_auto_install = __esm({
+  "src/cli/lib/auto-install.ts"() {
+    init_doctor_registry();
+  }
+});
+
 // package.json
 var package_default = {
-  version: "3.8.0"};
+  version: "3.9.1"};
 
 // src/manifest/errors.ts
 function instancePathToKeyPath(instancePath) {
@@ -1442,8 +1654,8 @@ function checkSecurityViolations(doc, filename, lineCounter) {
     ["spec", "verify", "cmd"],
     ["spec", "uninstall", "cmd"]
   ];
-  for (const p4 of cmdPaths) {
-    const err2 = checkScalarCmd(doc, lineCounter, p4, filename);
+  for (const p5 of cmdPaths) {
+    const err2 = checkScalarCmd(doc, lineCounter, p5, filename);
     if (err2) errors.push(err2);
   }
   const cleanupNode = doc.getIn(["spec", "uninstall", "cleanup_paths"], true);
@@ -2024,111 +2236,9 @@ function registerBackupList(program2) {
     console.log(t("backup.total_snapshots", { count: dirs.length }));
   });
 }
-function checkNodeVersion() {
-  const v = process.versions.node;
-  const major = Number.parseInt(v.split(".")[0] ?? "0", 10);
-  return major >= 22 ? { name: "node \u2265 22", status: "pass", message: `node ${v}` } : {
-    name: "node \u2265 22",
-    status: "fail",
-    message: `node ${v} (need \u2265 22)`,
-    fix: "nvm install 22 && nvm use 22"
-  };
-}
-async function checkMcpScope() {
-  const projectMcp = join(process.cwd(), ".mcp.json");
-  const userClaude = join(homedir(), ".claude.json");
-  let projectExists = false;
-  try {
-    await readFile(projectMcp, "utf8");
-    projectExists = true;
-  } catch {
-  }
-  let userHasMcp = false;
-  try {
-    const raw = await readFile(userClaude, "utf8");
-    const parsed = JSON.parse(raw);
-    userHasMcp = !!parsed.mcpServers && Object.keys(parsed.mcpServers).length > 0;
-  } catch {
-  }
-  if (userHasMcp) {
-    return {
-      name: "mcp scope = project",
-      status: "fail",
-      message: `~/.claude.json has user-scope mcpServers (CC #54803 risk)`,
-      fix: "remove user-scope entries; re-add via `claude mcp add --scope project ...`"
-    };
-  }
-  return {
-    name: "mcp scope = project",
-    status: "pass",
-    message: projectExists ? "project .mcp.json present" : "no MCP servers installed"
-  };
-}
-function checkJq() {
-  const finder = process.platform === "win32" ? "where" : "which";
-  const r = spawnSync(finder, ["jq"], { encoding: "utf8" });
-  if (r.status === 0 && r.stdout.trim().length > 0) {
-    return {
-      name: "jq present",
-      status: "pass",
-      message: r.stdout.split(/\r?\n/)[0]?.trim() ?? "jq found"
-    };
-  }
-  const fix = process.platform === "win32" ? "winget install jqlang.jq  (or: scoop install jq)" : process.platform === "darwin" ? "brew install jq" : "apt-get install jq  (or: dnf install jq)";
-  return { name: "jq present", status: "fail", message: "jq not found in PATH", fix };
-}
-function checkWinBash() {
-  if (process.platform !== "win32") {
-    return { name: "bash flavor (win)", status: "pass", message: "skipped (non-Windows)" };
-  }
-  const where = spawnSync("where", ["bash"], { encoding: "utf8" });
-  const firstBash = (where.stdout ?? "").split(/\r?\n/)[0]?.trim() ?? "(not found)";
-  if (where.status !== 0 || !firstBash || firstBash === "(not found)") {
-    return {
-      name: "bash flavor (win)",
-      status: "fail",
-      message: "no bash on PATH",
-      fix: "install Git for Windows (Git Bash) and ensure it is on PATH"
-    };
-  }
-  const probe = spawnSync("bash", ["-c", "echo $WSL_DISTRO_NAME"], { encoding: "utf8" });
-  const distro = (probe.stdout ?? "").trim();
-  if (distro.length > 0) {
-    return {
-      name: "bash flavor (win)",
-      status: "fail",
-      message: `WSL bash (${distro}) \u2014 ralph-loop subagent fork breaks under WSL`,
-      fix: "reorder PATH so Git Bash precedes WSL bash.exe (Settings \u2192 System \u2192 Environment Variables)"
-    };
-  }
-  return { name: "bash flavor (win)", status: "pass", message: `${firstBash} (Git Bash / native)` };
-}
-
-// src/cli/lib/doctor-registry.ts
-var CHECKS = [
-  async () => checkNodeVersion(),
-  checkMcpScope,
-  async () => checkJq(),
-  async () => checkWinBash(),
-  async () => {
-    const { checkOrigin: checkOrigin2 } = await Promise.resolve().then(() => (init_origin_check(), origin_check_exports));
-    const r = checkOrigin2(process.cwd(), { allowFork: true });
-    return { name: "origin URL", status: r.status, message: r.detail, fix: r.fix };
-  },
-  async () => {
-    const { probeGstackPrefix: probeGstackPrefix2 } = await Promise.resolve().then(() => (init_probe_gstack(), probe_gstack_exports));
-    const r = probeGstackPrefix2();
-    return { name: "gstack prefix", status: r.status, message: r.detail, fix: r.fix };
-  },
-  async () => (await Promise.resolve().then(() => (init_check_deprecations(), check_deprecations_exports))).checkDeprecations(),
-  async () => (await Promise.resolve().then(() => (init_check_token_budget(), check_token_budget_exports))).checkTokenBudget(),
-  async () => (await Promise.resolve().then(() => (init_check_agent_teams_doctor(), check_agent_teams_doctor_exports))).checkAgentTeamsDoctor(),
-  async () => (await Promise.resolve().then(() => (init_check_planning_with_files(), check_planning_with_files_exports))).checkPlanningWithFiles(),
-  async () => (await Promise.resolve().then(() => (init_check_mattpocock_skills(), check_mattpocock_skills_exports))).checkMattpocockSkills(),
-  async () => (await Promise.resolve().then(() => (init_check_mcp_availability(), check_mcp_availability_exports))).checkMcpAvailability()
-];
 
 // src/cli/doctor.ts
+init_doctor_registry();
 function registerDoctor(program2) {
   program2.command("doctor").description(
     "Preflight checks (Node / MCP scope / jq / Win bash / origin URL / gstack prefix / deprecations / token budget / Agent Teams / planning-with-files / mattpocock-skills / MCP availability)"
@@ -2378,7 +2488,7 @@ var V3_4_3_SIGNATURE_MASTER_RX = /\*\*Preferred path\*\*[\s\S]*dispatch to the p
 function shouldOverwriteFile(content) {
   return HARNESSED_MARKER_RX.test(content) || V3_4_3_SIGNATURE_SUB_RX.test(content) || V3_4_3_SIGNATURE_MASTER_RX.test(content);
 }
-async function writeAllCommands(slashNames, commandsDir, rolePrompts, capabilities, installedPlugins, installedUserSkills, writer, fileExists2 = existsSync, readFileSync9 = (p4) => readFileSync(p4, "utf8")) {
+async function writeAllCommands(slashNames, commandsDir, rolePrompts, capabilities, installedPlugins, installedUserSkills, writer, fileExists2 = existsSync, readFileSync9 = (p5) => readFileSync(p5, "utf8")) {
   const results = [];
   const aggregatedWarnings = /* @__PURE__ */ new Set();
   for (const name of slashNames) {
@@ -3362,10 +3472,10 @@ ${rp.checklist.map((c, i) => `  ${i + 1}. ${c}`).join("\n")}` : "";
 }
 function isRalphLoopOptIn(phase) {
   if (!phase || typeof phase !== "object") return false;
-  const p4 = phase;
-  if (p4.max_iterations !== void 0 && p4.max_iterations !== null) return true;
-  if (p4.upstream === "ralph-loop") return true;
-  const fb = p4.fallback;
+  const p5 = phase;
+  if (p5.max_iterations !== void 0 && p5.max_iterations !== null) return true;
+  if (p5.upstream === "ralph-loop") return true;
+  const fb = p5.fallback;
   if (fb?.max_iterations_exceeded !== void 0) return true;
   return false;
 }
@@ -3713,19 +3823,19 @@ async function listWorkflowNames(workflowsDir) {
   const names = [];
   const entries = await readdir(workflowsDir);
   for (const e of entries.sort()) {
-    const p4 = join(workflowsDir, e);
-    const s = await stat(p4).catch(() => null);
+    const p5 = join(workflowsDir, e);
+    const s = await stat(p5).catch(() => null);
     if (!s?.isDirectory()) continue;
-    if (await fileExists(join(p4, "workflow.yaml"))) {
+    if (await fileExists(join(p5, "workflow.yaml"))) {
       names.push(e);
       continue;
     }
-    if (await fileExists(join(p4, "auto", "workflow.yaml"))) {
+    if (await fileExists(join(p5, "auto", "workflow.yaml"))) {
       names.push(e);
-      const subs = await readdir(p4).catch(() => []);
+      const subs = await readdir(p5).catch(() => []);
       for (const sub of subs.sort()) {
         if (sub === "auto") continue;
-        if (await fileExists(join(p4, sub, "workflow.yaml"))) {
+        if (await fileExists(join(p5, sub, "workflow.yaml"))) {
           names.push(`${e}-${sub}`);
         }
       }
@@ -3859,10 +3969,10 @@ async function dirSizeKb(dir) {
     if (!cur) break;
     const entries = await readdir(cur, { withFileTypes: true });
     for (const e of entries) {
-      const p4 = join(cur, e.name);
-      if (e.isDirectory()) stack.push(p4);
+      const p5 = join(cur, e.name);
+      if (e.isDirectory()) stack.push(p5);
       else if (e.isFile()) {
-        const st = await stat(p4);
+        const st = await stat(p5);
         total += st.size;
       }
     }
@@ -6029,7 +6139,7 @@ function registerSetup(program2) {
   ).option("--dry-run", "preview only \u2014 do not write to disk (opt-in for advanced users)").option(
     "--user-lang <code>",
     "override detected OS locale for env.HARNESSED_USER_LANG (en | zh-Hans / zh-CN / zh-TW)"
-  ).action(async (raw) => {
+  ).option("--non-interactive", "skip all confirm prompts (CI / scripted setup)").option("--no-auto-install", "do not prompt to auto-install missing plugins (advisory only)").action(async (raw) => {
     const dryRun = raw.dryRun === true;
     const pkgRoot = getPackageRoot();
     const workflowsDir = resolve(pkgRoot, "workflows");
@@ -6112,7 +6222,7 @@ function registerSetup(program2) {
       capabilitiesMap,
       installedPlugins,
       installedUserSkills,
-      async (p4, c) => writeFile(p4, c, "utf8")
+      async (p5, c) => writeFile(p5, c, "utf8")
     );
     const writtenCount = cmdResult.results.filter((r) => r.written).length;
     const skippedCount = cmdResult.results.filter((r) => !r.written && r.warning).length;
@@ -6188,6 +6298,15 @@ function registerSetup(program2) {
     console.log(t("setup.bundled_summary"));
     console.log(t("setup.bundled_location"));
     console.log(t("setup.doctor_hint"));
+    if (!dryRun) {
+      const isTty = process.stdin.isTTY === true && process.stdout.isTTY === true;
+      const { runAutoInstall: runAutoInstall2 } = await Promise.resolve().then(() => (init_auto_install(), auto_install_exports));
+      await runAutoInstall2({
+        nonInteractive: raw.nonInteractive === true || !isTty,
+        autoInstall: raw.autoInstall !== false
+        // commander default = true; --no-auto-install flips
+      });
+    }
     process.exit(0);
   });
 }